[PATCH 0/7] XSAs 213-315 followups

[Andrew Cooper <andrew.cooper3@citrix.com>]

Various improvements based on observations while investigating and fixing the
aformentioned XSAs.  All are candidate patches for 4.9 at this point, with
patches 2, 3 and 7 being the important ones from an attack-surface-mitigation
point of view.

This is the subset of my intented series, but I haven't had time to finish the
rest of the work I wanted to do, which clearly makes it post 4.9 work at this
point.

Andrew Cooper (7):
  x86/traps: Drop 32bit fields out of tss_struct
  x86/traps: Poison unused stack pointers in the TSS
  x86/mm: Further restrict permissions on some virtual mappings
  x86/traps: Rename compat_hypercall() to entry_int82()
  x86/traps: Lift all non-entrypoint logic in entry_int82() up into C
  x86/asm: Fold LOAD_C_CLOBBERED into RESTORE_ALL
  x86/asm: Clobber %r{8..15} on exit to 32bit PV guests

 xen/arch/x86/cpu/common.c           |  8 +++++++
 xen/arch/x86/domain.c               |  2 +-
 xen/arch/x86/mm.c                   | 10 ++++-----
 xen/arch/x86/mm/hap/hap.c           |  4 ++--
 xen/arch/x86/mm/shadow/multi.c      | 18 +++++++--------
 xen/arch/x86/pv/Makefile            |  2 ++
 xen/arch/x86/pv/traps.c             | 44 +++++++++++++++++++++++++++++++++++++
 xen/arch/x86/traps.c                |  4 ++--
 xen/arch/x86/x86_64/compat/entry.S  | 13 +++--------
 xen/arch/x86/x86_64/mm.c            | 12 +++++-----
 xen/drivers/passthrough/vtd/iommu.c |  4 ++--
 xen/include/asm-x86/apic.h          |  1 +
 xen/include/asm-x86/asm_defns.h     | 38 ++++++++++++++------------------
 xen/include/asm-x86/hypercall.h     |  4 ++++
 xen/include/asm-x86/iommu.h         |  2 ++
 xen/include/asm-x86/processor.h     | 26 +++++++++++-----------
 16 files changed, 121 insertions(+), 71 deletions(-)
 create mode 100644 xen/arch/x86/pv/traps.c

-- 
2.1.4


_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel